Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/fsXyOE4h9kNhkTORzhqSs3LoD68.mft
File: fsXyOE4h9kNhkTORzhqSs3LoD68.mft (raw, json)
Hash identifier: wMxX2L+27tXQIITp6HTajtVScgod1SxwbrkAWd+bINA=
Subject key identifier: 0C:68:B5:CB:E4:AA:53:8F:90:43:57:5C:E9:67:CA:97:E2:AB:F0:E6
Authority key identifier: 7E:C5:F2:38:4E:21:F6:43:61:91:33:91:CE:1A:92:B3:72:E8:0F:AF
Certificate issuer: /CN=7ec5f2384e21f64361913391ce1a92b372e80faf
Certificate serial: 01A1E05EB0FA34DECDB086EBBC97E08528B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXyOE4h9kNhkTORzhqSs3LoD68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/fsXyOE4h9kNhkTORzhqSs3LoD68.mft
Manifest number: 0172
Signing time: Sun 15 Nov 2026 18:01:04 +0000
Manifest this update: Sun 15 Nov 2026 18:01:04 +0000
Manifest next update: Mon 16 Nov 2026 18:01:04 +0000
Files and hashes: 1: LPa8zPLpV8cXLL0nCvftZJmqBOc.roa (hash: LXKc34IWPeXHGhj7ZOiZu7C5VwcYcKy1yZjCEZ9N19Q=)
2: fsXyOE4h9kNhkTORzhqSs3LoD68.crl (hash: TL98SqL3MYOrcdrx3crNGOCLC2nJ8JP8g/2df3z+fNQ=)
3: pQG7xs47QDWXz1fB29umQErevhE.roa (hash: YQn0GgeL+9mDh4EZTTSLpL9PtFZrlsb8YoTmjdlwtnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/fsXyOE4h9kNhkTORzhqSs3LoD68.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/fsXyOE4h9kNhkTORzhqSs3LoD68.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsXyOE4h9kNhkTORzhqSs3LoD68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:5e:b0:fa:34:de:cd:b0:86:eb:bc:97:e0:85:28:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec5f2384e21f64361913391ce1a92b372e80faf
Validity
Not Before: Nov 15 18:01:04 2026 GMT
Not After : Nov 16 18:01:04 2026 GMT
Subject: CN=0c68b5cbe4aa538f9043575ce967ca97e2abf0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:04:13:29:12:8e:c0:fd:fb:a8:24:a4:24:da:
ac:f0:fe:50:5c:d6:5c:68:b0:2b:f3:fb:57:fc:11:
94:c7:1d:1e:72:34:2d:49:48:5a:83:48:8f:f2:fb:
f3:91:5e:7d:0c:a5:3e:d4:d5:84:be:8d:91:51:a5:
d3:a4:72:81:5f:9d:de:5d:06:8b:02:29:63:bd:ef:
4e:90:3f:b5:82:10:5f:2e:7e:3f:38:b8:74:52:7b:
99:a4:5f:4b:9e:7f:8a:8d:e7:9f:64:83:79:f2:0e:
f0:55:8a:93:ef:69:95:ed:9a:39:3b:3f:ea:f5:1e:
6d:d3:f6:3a:a3:ea:fc:ec:76:14:00:6c:6f:14:71:
1b:f5:01:95:2e:6c:e4:c1:08:b8:3f:79:af:e7:d3:
c2:2e:c3:81:6d:01:92:f8:21:65:2d:6e:ff:9e:b5:
c9:d1:39:42:79:f6:62:82:ba:0a:9d:7b:32:68:35:
50:dd:9d:cd:41:07:22:9d:e4:82:06:95:3f:1a:80:
1e:8f:a7:5d:bf:8d:09:aa:5d:c3:da:6b:0c:65:d3:
a6:9d:9a:09:b2:e0:cb:ac:f0:f4:12:b2:51:1b:6d:
87:71:36:5b:9f:7b:45:1a:c5:aa:e7:11:cc:d1:35:
5d:cd:45:a8:52:30:92:29:4c:d9:fc:5e:47:5c:3e:
36:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:68:B5:CB:E4:AA:53:8F:90:43:57:5C:E9:67:CA:97:E2:AB:F0:E6
X509v3 Authority Key Identifier:
keyid:7E:C5:F2:38:4E:21:F6:43:61:91:33:91:CE:1A:92:B3:72:E8:0F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXyOE4h9kNhkTORzhqSs3LoD68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/fsXyOE4h9kNhkTORzhqSs3LoD68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/fsXyOE4h9kNhkTORzhqSs3LoD68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:33:7a:0f:78:3b:00:56:c6:58:d9:60:11:2c:b3:1b:d2:35:
cf:2d:59:6d:b6:4c:03:b6:25:d9:df:e7:7a:5f:e6:8b:d4:23:
4d:79:61:70:79:d3:95:39:ea:99:74:7a:79:b8:e8:32:f3:1a:
ce:b7:e1:6a:07:67:76:21:a9:c7:79:8f:c0:36:f1:dc:f4:51:
23:9d:ca:2c:2b:66:d2:07:41:7e:44:7f:be:f6:68:bb:49:df:
28:43:3a:82:b5:bc:ee:47:90:4f:33:c1:22:4a:c5:cc:ef:60:
6d:88:f3:59:71:dd:05:f5:79:0a:f4:ee:0f:35:d7:bb:70:44:
a0:33:4b:86:ba:3d:74:b7:21:fa:2c:2a:6c:89:05:48:d9:fb:
1c:24:5d:12:ec:18:9e:31:f5:27:0f:51:3d:4d:02:7a:e4:d5:
c4:b5:9b:61:29:c5:cb:f0:80:93:9d:fb:2f:09:0b:8d:27:73:
82:2f:6a:74:c5:50:79:16:79:65:f6:29:47:7e:00:4f:64:70:
b4:97:b3:ef:2f:a5:af:7f:75:e3:a1:c4:18:a3:5a:b6:3e:25:
74:fa:e1:6e:9f:62:3d:17:ae:b6:81:1e:41:63:19:95:6d:25:
65:61:cc:9f:e8:58:47:6d:73:b8:0c:48:91:e3:03:ce:b9:50:
d3:fb:b9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:19:32 2026 by rpki-client